CVE-2020-10111

HIGH

Citrix Gateway 11.1 12.0 12.1 - HTTP Request Smuggling

Title source: llm
STIX 2.1

Description

Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic for performance optimization

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://support.citrix.com/search
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://seclists.org/fulldisclosure/2020/Mar/11

Scores

CVSS v3 7.5
EPSS 0.0195
EPSS Percentile 77.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-444
Status published
Products (3)
citrix/gateway_firmware 11.1
citrix/gateway_firmware 12.0
citrix/gateway_firmware 12.1
Published Mar 06, 2020
Tracked Since Feb 18, 2026